370 Xbox Game Pass Logins Leaked, Enough to Fill a Classroom

370 records does not sound like a scary number until you picture it, that is about ten classrooms worth of people whose login information ended up inside a stealer log named "591 xbox game pass cluod" and shared on Telegram in January 2025. Small leaks like this get overlooked easily, but every single one of those 370 accounts belongs to a real person.

Why This Is Dangerous

Gaming accounts are ofthen treated as low priority by the people who own them, but they still hold payment methods, personal details, and sometimes years worth of purchase history. An attacker who grabs one of these logins can rack up charges, sell the account, or use it as a lead into other accounts owned by the same person.

What Was Exposed

• 370 total records
• Email Addresses
• Plaintext Password
• URLs linked to each login

Why This Matters

Because the passwords in this file are stored in plaintext, there is no scrambling or hashing standing in the way of anyone who downloads it. If the same password protects your email or a payment app, this small leak could quietly open a door into a much bigger part of your digital life then you'd expect.

How Stealer Logs Work

This log was almost certainly built the same way most are, malware infects a device, usually through a pirated game, cracked software, or a fake download link, then quietly copies saved browser passwords and the URLs they belong to. Once collected, the data gets packaged into a file and uploaded for others to grab.

Check If You Are Affected

Even a leak this size deserves a quick check. HEROIC's free breach scanner searches a database of over 400 billion exposed records, so you can type in your email and know right away whether you were part of this leak or any other one out there.